JN0-636 試験問題を無料オンラインアクセス

Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

• A.You can only use the Proxy_Node3 feed as the destination-address match criteria of another security policy on a different SRX Series device.
• B.The SRX-1 device creates the Proxy_wodes feed, so it cannot use it in another security policy.
• C.The SRX-1 device can use the Proxy__Nodes feed in another security policy.
• D.You can use the Proxy_Nodes feed as the source-address and destination-address match criteria of another security policy on a different SRX Series device.

You are connecting two remote sites to your corporate headquarters site; you must ensure that all traffic is secured and only uses a single Phase 2 SA for both sites.
In this scenario, which VPN should be used?

• A.Full mesh IPsec VPNs with tunnels between all sites.
• B.An IPsec group VPN with the corporate firewall acting as the hub device.
• C.A hub-and-spoke IPsec VPN with the corporate firewall acting as the hub device.
• D.A full mesh Layer 3 VPN with the corporate firewall acting as the hub device.

You want to use selective stateless packet-based forwarding based on the source address.
In this scenario, which command will allow traffic to bypass the SRX Series device flow daemon?

• A.set firewall family inet filter bypas3_flowd term t1 then virtual-channel stateless
• B.set firewall family inet filter bypass__f lowd term t1 then packet-mode
• C.set firewall family inet filter bypaa3_flowd term t1 then skip-services accept
• D.set firewall family inet filter bypass_flowd term t1 then routing-instance stateless

You want to enforce I DP policies on HTTP traffic.
In this scenario, which two actions must be performed on your SRX Series device? (Choose two )

• A.Choose an attacks type in the predefined-attacks-group HTTP-All.
• B.Match on application junos-http.
• C.Specify an action of None.
• D.Disable screen options on the Untrust zone.

Which two statements are correct regarding tenant systems on SRX Series devices? (Choose two.)

• A.A maximum of 500 tenant systems can be configured on a physical SRX device.
• B.A maximum of 32 tenant systems can be configured on a physical SRX device.
• C.Each tenant system runs its own instance of the routing protocol process
• D.All tenant systems share a single routing protocol process.